DOCKET NO.: IVPH-0041 PATENT 

Application No.: 09/625,547 

Office Action Dated: August 16, 2006 

This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1 . (Previously Presented) A method of providing improved security for systems 
or files accessible by password data entry comprising: 

determining a secure password; 
providing a system or file; 

providing the secure password to a password database independent of the system and 
the file storage therein in association with a security level; 

providing the secure password to a password sub-system for securing the determined 
system or file; 

determining a user authorization method having an associated security level sufficient 
for accessing the secure password, the user authorization method determined in dependence 
upon the security level and some user authorization having different associated security levels 
than others; 

authorizing an individual according to the determined user authorization method; and 
when the individual is authorized, retrieving the secure password from the password 
database and automatically providing the secure password to the system or file password 
subsystem for accessing the system or file wherein the system or file is accessible by 
manually entering the secure password to the password sub-system. 

2. (Previously Presented) The method of providing improved security for 
systems or files accessible by password data entry as defined in claim 1 wherein determining 
the secure password comprises automatically determining the secure password. 

3. (Previously Presented) The method of providing improved security for 
systems or files accessible by password data entry as defined in claim 2 wherein the 
determined secure password is secret and remains inaccessible to users of the system. 
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4. (Previously Presented) The method of providing improved security for 
systems or files accessible by password data entry as defined in claim 1 wherein the password 
database comprises a key data file. 

5. (Previously Presented) The method of providing improved security for 
systems or files accessible by password data entry as defined in claim 4 wherein the password 
database is stored within a portable storage medium. 

6. (Previously Presented) The method of providing improved security for 
systems or files accessible by password data entry as defined in claim 1 wherein determining 
the secure password comprises manually providing the secure password to a password entry 
sub -system; and recording the password during entry. 

7. (Previously Presented) The method of providing improved security for 
systems or files accessible by password data entry as defined in claim 1 wherein the password 
is stored in association with data indicative of the determined system or file. 

8. (Previously Presented) The method of providing improved security for 
systems or files accessible by password data entry as defined in claim 1 wherein the 
determined system or file is stored in association with data indicative of the password. 

9. (Previously Presented) A method of providing improved security for files 
accessible by password data entry comprising: 

selecting a secured data file; 
providing a password database; 

automatically determining a secure password identifier associated with the secured 
data file; 

determining a user authorization method having an associated security level sufficient 

for accessing the secure password identifier, some user authorization methods having 

different associated security levels than others; 

authorizing an individual according to the determined user authorization method; and 
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when the individual is authorized, retrieving the secure password from the password 
database and automatically providing the secure password to a selected secured file password 
entry subsystem. 

10. (Previously Presented) The method of providing improved security for files 
accessible by password data entry as defined in claim 9 wherein the password database 
comprises a plurality of passwords and wherein determining a secure password identifier 
comprises determining a password from the plurality of passwords for use in accessing data 
within the secured data file. 

1 1 . (Previously Presented) A method of changing a first password for securing 
files accessible by password data entry comprising: 

determining a plurality of files secured with the first password; 

authorizing an individual requesting a change of the first password prior to changing 
the first password by determining a user authorization method having an associated security 
level sufficient for accessing the secured first password, where some user authorization 
methods have different associated security levels than others, and authorizing an individual 
according to the determined user authorization method; 

when the individual is authorized, providing a second other password for securing the 
plurality of files; 

for each file secured with the first password, accessing the file with the first password 
and securing the file with the second other password; and, 

storing the second other password in a password database. 

12. (Previously Presented) The method of changing a first password for securing 
files accessible by password data entry as defined in claim 1 1 comprising: 

archiving the first password for use in accessing archival files secured with the first 
password. 

13. (Canceled) 
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14. (Canceled) 



15. (Previously Presented) The method of changing a first password for securing 
files accessible by password data entry as defined in claim 1 1 wherein determining a plurality 
of files secured with the first password comprises determining from the password database, 
files associated with the first password. 

16. (Previously Presented) The method of changing a first password for securing 
files accessible by password data entry as defined in claim 15 wherein those files associated 
with the first password are identified because they are identified by an identifier associated 
with the first password. 

17. (Previously Presented) The method of changing a first password for securing 
files accessible by password data entry as defined in claim 1 1 wherein determining a plurality 
of files secured with the first password comprises determining from accessible files, those 
files associated with the first password. 

18. (Previously Presented) The method of changing a first password for securing 
files accessible by password data entry as defined in claim 1 1 wherein providing a second 
other password includes automatically generating the second other password. 

19. (Previously Presented) The method of changing a first password for securing 
files accessible by password data entry as defined in claim 18 wherein the method is 
automatically repeated at intervals. 

20. (Previously Presented) The method of changing a first password for securing 
files accessible by password data entry as defined in claim 19 wherein the method is 
automatically repeated upon detection of a breach of the first password and upon expiry of 
the first password. 
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21 . (Previously Presented) A security system that provides improved security for 
systems or files stored in a file storage that is accessible by password data entry, comprising: 

a password sub-system that secures a determined system or file with a secure 
password; 

a password database that stores the secure password independent of the security 
system and the file storage therein in association with a security level; and 

processing means for determining a user authorization method having an associated 
security level sufficient for accessing the secure password, the user authorization method 
determined in dependence upon the security level and some user authorization having 
different associated security levels than others, for authorizing an individual according to the 
determined user authorization method; and when the individual is authorized, retrieving the 
secure password from the password database and automatically providing the secure 
password to the file password sub-system for accessing the system or file wherein the system 
or file is accessible by manually entering the secure password to the password sub-system. 

22. (Previously Presented) The security system as defined in claim 21 further 
comprising means for automatically determining the secure password. 

23. (Previously Presented) The security system as defined in claim 22 wherein the 
determined secure password is secret and remains inaccessible to users of the system. 

24. (Previously Presented) The security system as defined in claim 21 wherein the 
password database comprises a key data file. 

25. (Previously Presented) The security system as defined in claim 24 wherein the 
password database is stored within a portable storage medium. 

26. (Previously Presented) The security system as defined in claim 21 further 
comprising a password entry sub-system to which the secure password is manually provided, 
the password entry sub-system recording the secure password during entry. 



Page 6 of 15 



DOCKET NO.: IVPH-0041 PATENT 

Application No.: 09/625,547 

Office Action Dated: August 16, 2006 

27. (Previously Presented) The security system as defined in claim 21 wherein the 
secure password is stored in association with data indicative of the determined system or file. 

28. (Previously Presented) The security system as defined in claim 21 wherein the 
determined system or file is stored in association with data indicative of the secure password. 

29. (Previously Presented) A security system that provides improved security for 
a secured data file stored in a file storage that is accessible by password data entry, 
comprising: 

a password database that stores a secure password; 
a secured file password entry subsystem; and 

processing means for automatically determining a secure password identifier 
associated with the secured data file, for determining a user authorization method having an 
associated security level sufficient for accessing the secure password identifier, some user 
authorization methods having different associated security levels than others, for authorizing 
an individual according to the determined user authorization method, and when the individual 
is authorized, retrieving the secure password ft-om the password database and automatically 
providing the secure password to the secured file password entry subsystem. 

30. (Previously Presented) The security system as defined in claim 29 wherein the 
password database comprises a plurality of passwords and wherein the processing means 
determines a secure password identifier by determining a password ft*om the plurality of 
passwords for use in accessing data within the secured data file. 

3 1 . (Previously Presented) A security system that changes a first password for 
securing files accessible by password data entry, comprising: 

a plurality of files secured with the first password; 

processing means for authorizing an individual requesting a change of the first 

password prior to changing the first password by determining a user authorization method 

having an associated security level sufficient for accessing the secured first password, where 

some user authorization methods have different associated security levels than others, for 
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authorizing an individual according to the determined user authorization method, when the 
individual is authorized, for providing a second other password for securing the plurality of 
files, and for each file secured with the first password, for accessing the file with the first 
password and securing the file with the second other password; and 
a password database that stores the second other password. 

32. (Previously Presented) The security system as defined in claim 3 1 
comprising: 

archive storage that archives the first password for use in accessing archival files 
secured with the first password. 

33. (Previously Presented) The security system as defined in claim 31 wherein the 
first password is stored in the password database and the plurality of files secured with the 
first password is determined from the files associated with the first password in the password 
database. 

34. (Previously Presented) The security system as defined in claim 33 wherein 
those files associated with the first password are identified by an identifier associated with the 
first password. 

35. (Previously Presented) The security system as defined in claim 31 wherein the 
processing means automatically generates the second other password. 

36. (Previously Presented) The security system as defined in claim 35 wherein the 
processing means automatically generates the second other password at repeated intervals. 

37. (Previously Presented) The security system as defined in claim 35 wherein the 
processing means automatically generates the second other password upon detection of a 
breach of the first password and upon expiry of the first password. 
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38. (Previously Presented) Computer software for providing improved security 
for systems or files accessible by password data entry comprising: 

computer-executable instructions for determining a secure password; 

computer-executable instructions for providing a system or file; 

computer-executable instructions for providing the secure password to a password 
database independent of the system and the file storage therein in association with a security 
level; 

computer-executable instructions for providing the secure password to a password 
sub-system for securing the determined system or file; 

computer-executable instructions for determining a user authorization method having 
an associated security level sufficient for accessing the secure password, the user 
authorization method determined in dependence upon the security level and some user 
authorization having different associated security levels than others; 

computer-executable instructions for authorizing an individual according to the 
determined user authorization method; and 

computer-executable instructions for, when the individual is authorized, retrieving the 
secure password ft*om the password database and automatically providing the secure 
password to the system or file password subsystem for accessing the system or file wherein 
the system or file is accessible by manually entering the secure password to the password 
sub-system. 

39. (Previously Presented) Computer software for providing improved security 
for files accessible by password data entry comprising: 

computer-executable instructions for selecting a secured data file; 

computer-executable instructions for providing a password database; 

computer-executable instructions for automatically determining a secure password 
identifier associated with the secured data file; 

computer-executable instructions for determining a user authorization method having 
an associated security level sufficient for accessing the secure password identifier, some user 
authorization methods having different associated security levels than others; 
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computer-executable instructions for authorizing an individual according to the 
determined user authorization method; and 

computer-executable instructions for, when the individual is authorized, retrieving the 
secure password from the password database and automatically providing the secure 
password to a selected secured file password entry subsystem. 

40. (Previously Presented) Computer software for changing a first password for 
securing files accessible by password data entry comprising: 

computer-executable instructions for determining a plurality of files secured with the 
first password; 

computer-executable instructions for authorizing an individual requesting a change of 
the first password prior to changing the first password by determining a user authorization 
method having an associated security level sufficient for accessing the secured first password, 
where some user authorization methods have different associated security levels than others, 
and authorizing an individual according to the determined user authorization method; 

computer-executable instructions for, when the individual is authorized, providing a 
second other password for securing the plurality of files; 

computer-executable instructions for accessing the file with the first password and 
securing the file with the second other password for each file secured with the first password; 
and 

computer-executable instructions for storing the second other password in a password 
database. 
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